Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nOSnWUUwyflF7S5FRfWQ8rjpQpU.roa
File: nOSnWUUwyflF7S5FRfWQ8rjpQpU.roa (raw, json)
Hash identifier: 2zkDwkjC0WSb9WES5WOQCIVrggLABJwpsrNwM0at9tQ=
Subject key identifier: 9C:E4:A7:59:45:30:C9:F9:45:ED:2E:45:45:F5:90:F2:B8:E9:42:95
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 782E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nOSnWUUwyflF7S5FRfWQ8rjpQpU.roa
Signing time: Thu 17 Jul 2025 19:42:04 +0000
ROA not before: Thu 17 Jul 2025 19:42:04 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30766 (0x782e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 17 19:42:04 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9CE4A7594530C9F945ED2E4545F590F2B8E94295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:a7:72:cd:65:a3:c0:34:a2:cc:15:af:43:
99:46:ec:48:f0:bc:6a:05:2f:5b:2e:8a:90:4a:02:
9e:5d:79:73:5b:cd:ba:46:80:b1:73:b5:47:5f:b3:
8b:4e:dc:8c:77:fa:15:96:73:b2:3d:45:62:70:1f:
a7:35:a8:99:22:f9:08:80:d4:33:a2:b5:26:0b:3d:
e6:2f:6a:fd:20:ff:df:f7:c9:75:6c:ae:70:20:52:
2e:c2:5f:20:b8:8d:5a:11:78:35:a9:e0:cb:ab:5c:
46:17:8f:88:54:45:d4:94:73:e3:ed:54:05:30:44:
71:aa:f6:dc:22:ad:ee:09:2b:d1:53:c2:e2:89:44:
5f:55:2f:c8:81:47:cf:b4:4e:5e:ef:7a:4b:eb:07:
2f:1d:17:28:db:8d:77:3a:e2:61:32:0e:8c:22:bd:
13:84:40:3f:4a:e3:51:50:75:d6:c9:31:7a:15:af:
87:69:66:6f:9d:11:74:a7:24:16:9a:57:57:f6:b4:
7a:c9:64:cf:65:14:1e:58:95:6f:f5:21:78:40:88:
0d:3b:81:70:d7:4a:c1:4b:25:07:b6:59:36:34:a9:
b7:e6:a0:02:aa:5e:87:5a:8c:f1:31:e6:21:37:eb:
41:b5:19:7a:31:b1:5e:40:d9:27:9f:26:c3:30:d2:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E4:A7:59:45:30:C9:F9:45:ED:2E:45:45:F5:90:F2:B8:E9:42:95
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nOSnWUUwyflF7S5FRfWQ8rjpQpU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
49:77:b8:40:45:85:a0:da:85:21:2b:28:5d:ad:e0:1b:2a:0e:
44:1e:02:38:f8:13:ad:41:bb:e8:7a:57:cf:c5:5c:80:63:78:
f9:f6:31:96:ce:d0:9e:40:df:90:ae:3e:a3:88:9a:7f:61:50:
0d:d0:27:6e:54:af:5c:6e:03:18:21:07:2f:16:3c:50:4d:c4:
4d:ed:41:78:a0:a3:e7:b3:80:93:5a:c3:c5:ec:28:21:59:37:
22:23:5f:5f:10:ca:25:55:db:27:cf:58:09:95:c8:35:e5:27:
e2:f9:69:91:d5:5c:22:84:95:52:0d:44:b1:52:5f:4b:c8:87:
25:08:c2:96:6e:1f:51:dd:80:9b:64:9a:4a:a6:0c:0f:03:fe:
95:95:67:d6:39:98:0d:6d:4a:e0:00:5e:1d:d4:82:a2:cc:90:
1d:e6:72:d6:81:f2:3c:da:5f:cb:3f:6b:83:6d:83:4e:1e:df:
07:a7:c9:bc:ce:c3:b5:1d:5a:8b:d9:96:7b:02:22:5e:c7:4e:
9c:1c:35:a6:63:59:a3:83:f9:15:49:dd:f8:a3:c8:33:73:cb:
06:df:fa:51:cd:47:99:81:9c:61:88:82:a7:6d:a9:bb:6a:af:
d3:3d:bb:94:45:8b:64:59:bb:c8:44:d9:b7:c2:2e:55:51:cc:
6c:2f:91:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:01 2025 by rpki-client